MS101 Microsoft 365 Mobility and Security Free Practice Test — 30 Questions

Question 1

An organization\'s distributed workforce, reliant on Microsoft 365 for daily operations, is reporting persistent and unpredictable disruptions in accessing cloud-based productivity suites. These intermittent connectivity issues are affecting a significant percentage of remote users across various geographical locations, leading to decreased productivity and frustration. Initial internal investigations have ruled out common user-specific issues such as local network problems or device malfunctions. The IT security and operations teams are under pressure to restore stable service access promptly. Which of the following actions represents the most critical and effective immediate step to diagnose and resolve this widespread service degradation?

Accepted Answer

Engage Microsoft Support with a detailed incident report, including network traces, application logs, and Microsoft 365 service health dashboard findings.

Question 2

Consider a global enterprise, \"QuantumLeap Innovations,\" which mandates a strict security posture requiring all employees to access sensitive customer data exclusively through company-issued and managed devices. This directive stems from recent regulatory changes and an increase in sophisticated phishing attacks targeting personal devices. The IT security team needs to implement a solution that enforces this policy across all Microsoft 365 services, ensuring that employees who attempt to access these services from unmanaged personal devices are blocked, while those using company-managed devices remain unaffected. Which Microsoft 365 security feature, when properly configured, would be the most direct and effective method to achieve this specific access control objective?

Accepted Answer

Configure a Microsoft Entra Conditional Access policy requiring compliant devices for access to all Microsoft 365 cloud apps.

Question 3

A multinational corporation, \"Aether Dynamics,\" operating under stringent data privacy laws such as the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA), is experiencing an increase in collaborative document sharing and communication via Microsoft Teams and SharePoint Online. The organization’s compliance team has identified a critical need to proactively safeguard Personally Identifiable Information (PII) from unauthorized disclosure and to ensure that such data is managed according to defined retention schedules, even within dynamic collaborative workflows. What integrated Microsoft 365 compliance strategy would best address Aether Dynamics\' requirement to both prevent the accidental or intentional sharing of PII and ensure its compliant lifecycle management within the Microsoft 365 ecosystem?

Accepted Answer

Implementing Microsoft Purview Data Loss Prevention (DLP) policies to detect and block sensitive information types, coupled with Microsoft Purview Retention Policies to manage the data lifecycle according to regulatory mandates.

Question 4

A multinational corporation, operating under the stringent requirements of the General Data Protection Regulation (GDPR), is deploying Microsoft Intune to manage a fleet of corporate-owned and BYOD mobile devices. The Chief Privacy Officer has raised concerns about the potential for unauthorized access to personally identifiable information (PII) stored on these devices, especially when employees travel to regions with differing data protection laws. The organization needs to implement a strategy that ensures data security, respects user privacy, and maintains compliance with GDPR\'s principles of data minimization and purpose limitation, particularly regarding data access and sharing. Which of the following Intune policy configurations would most effectively address these multifaceted concerns?

Accepted Answer

Implement Intune configuration profiles mandating full device encryption, restricting app-based data sharing with non-compliant applications, and configuring conditional access policies to require multi-factor authentication and location-based access controls for sensitive corporate resources.

Question 5

A cybersecurity analyst is tasked with securing access to sensitive financial data stored within Microsoft 365. A new executive, Ms. Anya Sharma, attempts to access a critical SharePoint Online site from her personal tablet. The organization has implemented a Microsoft Entra ID Conditional Access policy that requires all access to this site to be from a compliant device. Ms. Sharma\'s tablet is not currently enrolled in Microsoft Intune. What is the most effective initial step to enable Ms. Sharma\'s access while adhering to the security policy?

Accepted Answer

Enroll Ms. Sharma's tablet into Microsoft Intune and ensure it meets the defined device compliance policy.

Question 6

A multinational corporation operating under stringent new data sovereignty laws is mandated to prevent any access to its Microsoft 365 tenant from designated geographical territories due to updated privacy regulations. The Chief Information Security Officer must implement an immediate technical control to enforce this restriction, ensuring no sensitive corporate data stored within Microsoft 365 is accessible from these newly regulated zones. Which Microsoft Entra ID feature, when configured appropriately, would be the most direct and effective solution to enforce this geographical access restriction for all users attempting to access Microsoft 365 services?

Accepted Answer

Configure Microsoft Entra Conditional Access policies to block sign-ins based on the user's sign-in location.

Question 7

A global organization relies heavily on Microsoft 365 for its daily operations, including email, document sharing via SharePoint, and real-time communication through Teams. Without warning, employees across all regions report an inability to access these core services. The IT security operations center is alerted to a significant, widespread service disruption. Considering the immediate aftermath of such an event, what is the most critical initial action the security team must undertake to effectively manage this crisis?

Accepted Answer

Initiate a comprehensive investigation to confirm the scope and nature of the Microsoft 365 service disruption, including potential root causes and any indicators of compromise.

Question 8

A novel zero-day exploit has been identified that bypasses the signature-based and basic heuristic detection mechanisms within Microsoft Defender for Endpoint, specifically targeting its advanced behavioral detection algorithms. This exploit is causing rapid, undetected lateral movement across the organization\'s network. To effectively contain and investigate this sophisticated threat, which of the following actions would provide the most immediate and granular insight into the exploit\'s activity, enabling the security team to pivot their response strategy?

Accepted Answer

Initiate a comprehensive review of all Microsoft 365 compliance policies and audit logs to identify any misconfigurations that might have allowed the exploit to propagate.

Question 9

Consider a scenario where an organization has implemented a Microsoft Entra ID Conditional Access policy targeting all Microsoft 365 applications. This policy mandates that access is granted only if the device is marked as \"Compliant\" by an approved Mobile Device Management (MDM) solution, and the session is restricted to \"Approved client applications.\" A user attempts to access Exchange Online via a personal, unmanaged Android smartphone using a standard web browser. The smartphone has not been enrolled in the organization\'s MDM solution, and the web browser is not listed among the approved client applications for session controls. What is the most likely outcome for this user\'s access attempt?

Accepted Answer

Access will be blocked due to the violation of both device compliance and approved client application requirements.

Question 10

A global enterprise is transitioning its IT infrastructure to Microsoft 365, aiming to consolidate user identity management and enforce robust access controls across all applications, both cloud-hosted and legacy on-premises systems. The IT security team mandates the implementation of single sign-on (SSO) and multifactor authentication (MFA) for every application to mitigate evolving cyber threats. Critically, the organization must ensure that employees can access these applications seamlessly from any location, including remote work scenarios, without relying on traditional VPN solutions for internal resources. Given the diverse nature of their application portfolio, which includes modern SaaS applications and older client-server applications still residing on-premises, what is the most comprehensive strategy to achieve these objectives?

Accepted Answer

Implement Azure AD Application Proxy to publish on-premises applications, synchronize on-premises Active Directory identities to Microsoft Entra ID using Azure AD Connect, and configure Microsoft Entra ID for SSO and MFA for all cloud-based applications.

Question 11

A multinational corporation is transitioning its workforce to a fully remote operational model, mandating the use of Microsoft 365 for all collaboration and productivity. Many employees have historically relied on on-premises infrastructure and are expressing concerns about data security, workflow disruption, and the learning curve associated with cloud-based services. The IT department is tasked with developing a strategy to ensure a smooth and secure transition, balancing the need for robust security controls with the imperative of employee adoption and productivity. Which of the following strategies best addresses the multifaceted challenges of this transition, encompassing technical proficiency, behavioral adaptation, and regulatory compliance within the Microsoft 365 ecosystem?

Accepted Answer

Implement a phased rollout of Microsoft 365 services, coupled with role-specific, hands-on training sessions that cover both technical application and best practices for remote collaboration and data handling, supported by continuous feedback mechanisms and a dedicated IT support hotline, while ensuring all configurations adhere to relevant data privacy regulations like GDPR.

Question 12

A global enterprise leverages Microsoft 365, with sensitive data stored in SharePoint Online. To safeguard this data, a Conditional Access policy is implemented, mandating that access to SharePoint Online requires devices to be marked as \"Compliant\" by Microsoft Intune and that multi-factor authentication (MFA) must be successfully completed. Consider Anya, an employee using her personal Android device. This device is enrolled in Intune, and Anya has already passed her MFA challenge for the day. However, her device is currently undergoing its initial compliance assessment, and the policy requiring full disk encryption has not yet been met. What is the most likely outcome when Anya attempts to access a SharePoint Online document?

Accepted Answer

Access to SharePoint Online will be denied because the device is not yet marked as compliant by Intune.

Question 13

AstroDynamics, a multinational corporation operating across various continents, is preparing to comply with the newly enacted \"Global Data Sovereignty Act\" (GDSA). This legislation mandates that all sensitive customer data generated within the European Union must physically reside within EU borders and be exclusively accessible by personnel located within the EU, under strict regulatory oversight. AstroDynamics extensively uses Microsoft 365 for its operations. Which strategic combination of Microsoft 365 features and configurations would best enable AstroDynamics to achieve compliance with the GDSA\'s dual requirements of data residency and geo-specific access control?

Accepted Answer

Implement Microsoft 365 Multi-Geo capabilities to designate a European geo for all EU customer data, coupled with Conditional Access policies that restrict access to this data based on user location within the EU and device compliance status.

Question 14

Aether Dynamics, a multinational technology firm, is undergoing a significant digital transformation, shifting to a hybrid work model and adopting a suite of new cloud-based collaboration tools. A primary concern for the IT security team is ensuring compliance with the General Data Protection Regulation (GDPR) for its European Union-based employees and clients, particularly concerning data residency. They need to implement a security control that restricts access to sensitive company data and applications for EU personnel when they are physically located outside the European Union, thereby safeguarding data handled in accordance with EU regulations. Which Microsoft Entra ID Conditional Access policy configuration would best achieve this objective?

Accepted Answer

Configure a Conditional Access policy targeting all users in the 'European Union' user group, granting access to 'All cloud apps' and requiring 'Multi-factor authentication' and 'Approved client applications' from 'Any location' except trusted locations outside the EU.

Question 15

Aethelred Capital, a global financial services firm, is enhancing its Microsoft 365 security framework to safeguard sensitive client data. Their mobile workforce frequently accesses resources from various locations and device types. The security team mandates that access to all Microsoft 365 applications be contingent upon the user signing in from a compliant corporate-issued device and exhibiting a low sign-in risk score. However, for a subset of less critical applications, such as the general Microsoft 365 service health dashboard, access should be permitted as long as the sign-in risk is assessed as low, irrespective of the device\'s compliance status. Which configuration within Microsoft Entra ID Conditional Access best achieves this differentiated access control strategy?

Accepted Answer

Create a single Conditional Access policy targeting all cloud apps, requiring both "Require device to be marked as compliant" and "Require low sign-in risk" for grant, then create a separate policy targeting only the less critical applications, requiring only "Require low sign-in risk" for grant.

Question 16

When a multinational corporation adopts a Bring Your Own Device (BYOD) strategy for its sales force, who frequently access sensitive customer relationship management (CRM) data and proprietary product information on their personal smartphones and tablets, what is the most effective strategy using Microsoft Intune to safeguard this corporate data while respecting employee privacy and minimizing disruption to personal device usage?

Accepted Answer

Implement application protection policies to containerize corporate data within managed applications, coupled with a selective wipe capability to remotely remove only corporate data and applications from devices when necessary.

Question 17

Consider a scenario where an organization has implemented a Microsoft Entra ID Conditional Access policy targeting all users accessing SharePoint Online. This policy mandates both \"Require multifactor authentication\" and \"Require device to be marked as compliant.\" A user\'s device is successfully enrolled in Microsoft Intune and is currently marked as compliant. The user attempts to access SharePoint Online using Windows Hello for Business, which is configured to utilize certificate-based authentication for initial identity verification, followed by a PIN prompt as the second factor. What is the most likely outcome of this access attempt?

Accepted Answer

Access to SharePoint Online is granted because both the compliant device requirement and the multifactor authentication requirement (via Windows Hello for Business PIN) are met.

Question 18

A global enterprise, heavily reliant on email for daily operations across its geographically dispersed workforce, is planning to migrate its on-premises Exchange environment to Microsoft 365. A significant portion of its employees work remotely, accessing their mailboxes via VPN and direct internet connections. The paramount objective is to ensure uninterrupted email service and a seamless user experience throughout the migration process, avoiding any extended periods of service unavailability. Which migration strategy would best align with these critical requirements for a smooth transition and ongoing operational continuity?

Accepted Answer

Implement a hybrid Exchange deployment, allowing for coexistence and a phased mailbox migration to Microsoft 365.

Question 19

Consider a large enterprise undergoing a significant merger, integrating several new business units with varying IT infrastructures and user adoption rates for cloud services. The Chief Information Security Officer (CISO) is tasked with enhancing the security posture of the unified Microsoft 365 environment by enforcing a new Conditional Access policy mandating multi-factor authentication (MFA) for all cloud application access, including mobile device usage. This initiative must be implemented during a period of considerable organizational flux, requiring careful consideration of user impact, operational continuity, and regulatory compliance with evolving data protection mandates. Which strategic approach best addresses the complexities of this rollout?

Accepted Answer

Implement the new MFA Conditional Access policy across all users and devices simultaneously, providing a single, comprehensive training webinar immediately prior to enforcement.

Question 20

An enterprise is planning a transition from a complex on-premises Exchange environment to Microsoft 365. The IT leadership has mandated that the migration process must minimize the impact on end-users, allowing for granular control over user groups and the ability to roll back specific batches if unforeseen issues arise. The organization has thousands of mailboxes, and a single, prolonged period of service interruption is unacceptable. Which migration strategy best aligns with these stringent requirements for a smooth and controlled transition?

Accepted Answer

Staged migration

Question 21

Consider the scenario where a cybersecurity firm, \"Aegis Solutions,\" is managing a Microsoft 365 tenant for a global financial institution. A recent sophisticated phishing campaign has been identified, specifically targeting credentials that grant access to customer financial records, which are stored in Microsoft SharePoint Online and accessed via Microsoft Teams. The institution is headquartered in the European Union and must adhere strictly to the General Data Protection Regulation (GDPR). Which of the following Conditional Access strategies would best balance robust security against evolving threats with the institution\'s compliance obligations and user experience?

Accepted Answer

Implement a policy requiring multi-factor authentication for all users accessing SharePoint Online and Teams, enforce a persistent browser session for all access, and require users to accept updated terms of use for accessing PII-containing applications.

Question 22

A multinational corporation operating within the European Union faces a mandatory request from a data subject to exercise their \"right to erasure\" under the General Data Protection Regulation (GDPR). The organization utilizes Microsoft 365 extensively for its operations, encompassing email, document storage, and collaboration tools. To efficiently and compliantly fulfill this request, which Microsoft 365 capability is most instrumental in programmatically identifying and systematically removing the specified user\'s personal data across the diverse Microsoft 365 workloads?

Accepted Answer

Microsoft Graph API

Question 23

Following a significant data exfiltration incident originating from an employee\'s personal mobile device used to access company cloud resources, the IT security team is tasked with implementing immediate preventative measures to safeguard sensitive customer information within Microsoft 365. Considering the organization\'s reliance on cloud-based collaboration and data storage, which of the following actions represents the most critical and foundational step to enforce organizational security posture for mobile access to Microsoft 365 services?

Accepted Answer

Configure Conditional Access policies to require devices to be marked as compliant with organizational standards before granting access to Microsoft 365 applications.

Question 24

Consider a situation where Microsoft Defender for Identity (MDI) has alerted your organization to a potential data exfiltration attempt originating from a user\'s compromised Microsoft 365 account. The suspicious activity involves unusual access patterns to sensitive SharePoint sites. To effectively manage this incident, what sequence of actions would be most appropriate for immediate containment and initial investigation?

Accepted Answer

Immediately isolate the user's account and associated endpoints using Microsoft Defender for Endpoint, investigate the specific MDI alerts to understand the scope of the anomaly, and review Microsoft Purview Data Loss Prevention (DLP) policies and Microsoft Entra ID Conditional Access policies to identify potential data leakage and access control gaps.

Question 25

An enterprise heavily reliant on remote employees is observing a significant uptick in sophisticated phishing campaigns, leading to an alarming increase in successful credential harvesting and subsequent account takeovers. To counter this escalating threat and ensure ongoing operational continuity while adhering to stringent data privacy mandates like GDPR, which combination of Microsoft 365 security capabilities provides the most robust and integrated defense strategy?

Accepted Answer

Implementing Microsoft Entra ID Protection for risk-based sign-in policies, Microsoft Defender for Office 365 for advanced threat protection against malicious emails and links, Microsoft Intune for device compliance management, and Microsoft Entra Conditional Access policies to enforce access controls based on user and device risk.

Question 26

Innovate Solutions, a financial services firm, is grappling with an escalating number of sophisticated phishing attacks and concerns about potential insider data breaches. The company\'s primary objective is to safeguard sensitive customer financial data, which is frequently communicated via email and shared through Microsoft 365 collaboration platforms. A key challenge is ensuring that this data is protected when accessed from various endpoints, including personal devices and networks outside the corporate perimeter. Which strategic combination of Microsoft 365 security capabilities would most effectively address the prevention of unauthorized access to and exfiltration of this confidential customer information?

Accepted Answer

Implementing comprehensive Data Loss Prevention (DLP) policies to detect and block sensitive financial data in transit and at rest, coupled with Conditional Access policies that enforce multi-factor authentication and device compliance for all Microsoft 365 access.

Question 27

When a multinational corporation transitions its workforce to a Microsoft 365 environment, adopting a strict Bring Your Own Device (BYOD) policy, and simultaneously aiming to comply with the European Union\'s General Data Protection Regulation (GDPR) concerning data residency and user privacy, what integrated approach using Microsoft Endpoint Manager (Intune) would best balance security posture, user flexibility, and regulatory adherence for mobile access to corporate resources?

Accepted Answer

Implement Conditional Access policies that mandate multi-factor authentication and device compliance checks for all access, coupled with granular App Protection Policies to isolate corporate data within applications on BYOD devices, and ensure data storage locations align with GDPR requirements.

Question 28

A global logistics firm, \"Horizon Freight,\" is experiencing a surge in sophisticated phishing attempts targeting its remote workforce. These attacks often bypass traditional email filtering by employing novel social engineering tactics and attempting to exploit zero-day vulnerabilities on employee devices. The IT security team needs to rapidly adapt its Microsoft 365 security posture to mitigate these evolving threats, focusing on proactive detection of anomalous user behavior and robust endpoint security. Which combination of Microsoft 365 security features and policies would best address this immediate need for enhanced resilience and adaptive defense?

Accepted Answer

Implement Microsoft Defender for Endpoint and Microsoft Defender for Identity, alongside granular Conditional Access policies that dynamically adjust access based on real-time risk signals.

Question 29

A financial services firm, operating under strict data privacy regulations such as the General Data Protection Regulation (GDPR), has just received a critical alert from Microsoft Defender for Endpoint indicating potential unauthorized access to sensitive client financial data via a compromised user account. The incident response team needs to act swiftly to mitigate risks and ensure compliance. Which of the following initial actions would be the most strategically sound and compliant first step to take in managing this escalating security event?

Accepted Answer

Initiate an automated investigation and response process within Microsoft Defender for Endpoint to identify the scope of the compromise and affected assets.

Question 30

A global administrator for a multinational corporation, operating under strict data sovereignty regulations that mandate the use of only company-approved, fully managed endpoints for accessing sensitive financial applications, has implemented a Microsoft Entra ID Conditional Access policy. This policy targets access to the \"Global Finance Portal.\" The policy requires that users must have their devices marked as compliant with organizational standards and must also perform multifactor authentication. Furthermore, it enforces a sign-in frequency of 12 hours, meaning users must re-authenticate every 12 hours to maintain access. During a critical period of market volatility, an employee, Mr. Kaito Tanaka, attempts to access the Global Finance Portal from his personal tablet, which has not been enrolled in Microsoft Intune and therefore is not marked as compliant. He has successfully registered his device for MFA and has passed the MFA challenge. What is the most probable outcome of Mr. Tanaka\'s attempt to access the Global Finance Portal?

Accepted Answer

Access to the Global Finance Portal will be blocked because the device is not marked as compliant with organizational standards.

MS101 Microsoft 365 Mobility and Security Free Practice Test — 30 Questions

A lot more is already mapped out

About the MS101 Microsoft 365 Mobility and Security Certification